VDB-214044 · ~~CVE-2022-4077~~

Yellow Tree Geolocation IP Detection Plugin on WordPress HTTP Header X-Forwarded-For neutralization for logs 🚫 [False Positive]

A vulnerability was suspected in Yellow Tree Geolocation IP Detection Plugin. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

Field	11/20/2022 14:01	11/20/2022 17:06	12/21/2022 08:30
vendor	Yellow Tree	Yellow Tree	Yellow Tree
name	Geolocation IP Detection Plugin	Geolocation IP Detection Plugin	Geolocation IP Detection Plugin
platform	WordPress	WordPress	WordPress
component	HTTP Header Handler	HTTP Header Handler	HTTP Header Handler
argument	X-Forwarded-For	X-Forwarded-For	X-Forwarded-For
cwe	117 (neutralization for logs)	117 (neutralization for logs)	117 (neutralization for logs)
risk	1	1	1
cvss3_vuldb_av	N	N	N
cvss3_vuldb_ac	L	L	L
cvss3_vuldb_pr	N	N	N
cvss3_vuldb_ui	N	N	N
cvss3_vuldb_s	U	U	U
cvss3_vuldb_c	N	N	N
cvss3_vuldb_i	L	L	L
cvss3_vuldb_a	N	N	N
cvss3_vuldb_e	P	P	P
cvss3_vuldb_rc	R	R	R
url	https://drive.google.com/file/d/1pqxoFeuLBtYeknit_1r0afFD8QE9uLx8/view	https://drive.google.com/file/d/1pqxoFeuLBtYeknit_1r0afFD8QE9uLx8/view	https://drive.google.com/file/d/1pqxoFeuLBtYeknit_1r0afFD8QE9uLx8/view
availability	1	1	1
publicity	1	1	1
url	https://drive.google.com/file/d/1iXfYmYMdB0gPbSjZscSdF8zLlA6PZZJA/view	https://drive.google.com/file/d/1iXfYmYMdB0gPbSjZscSdF8zLlA6PZZJA/view	https://drive.google.com/file/d/1iXfYmYMdB0gPbSjZscSdF8zLlA6PZZJA/view
cve	CVE-2022-4077	CVE-2022-4077	CVE-2022-4077
responsible	VulDB	VulDB	VulDB
date	1668898800 (11/20/2022)	1668898800 (11/20/2022)	1668898800 (11/20/2022)
type	WordPress Plugin	WordPress Plugin	WordPress Plugin
cvss2_vuldb_av	N	N	N
cvss2_vuldb_ac	L	L	L
cvss2_vuldb_au	N	N	N
cvss2_vuldb_ci	N	N	N
cvss2_vuldb_ii	P	P	P
cvss2_vuldb_ai	N	N	N
cvss2_vuldb_e	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR
cvss2_vuldb_rl	ND	ND	ND
cvss3_vuldb_rl	X	X	X
cvss2_vuldb_basescore	5.0	5.0	5.0
cvss2_vuldb_tempscore	4.3	4.3	4.3
cvss3_vuldb_basescore	5.3	5.3	5.3
cvss3_vuldb_tempscore	4.8	4.8	4.8
cvss3_meta_basescore	5.3	5.3	5.3
cvss3_meta_tempscore	4.8	4.8	4.8
price_0day	$0-$5k
disputed		1	1
falsepositive		1	1
cve_assigned			1668898800 (11/20/2022)

◂ Previous Overview Next ▸

Do you need the next level of professionalism?

Upgrade your account now!